AariaSec Field Notes — AI Agent Incident Intelligence

AWR Quick Reference

AWR-001

Prompt Injection Attempt

Sudden tool-call spike, unusual token ratios, new egress destinations appearing simultaneously.
AWR-006

Agent Impersonation

Behavioral fingerprint deviates sharply from baseline — possible agent hijacking. Mahalanobis distance exceeds threshold.
AWR-100

Quality Degradation (Compound)

Compound response-quality degradation across session. Fires when coherence decline persists beyond transient noise.
AWR-111

Injection → Exfil Chain

Prompt injection followed by new tool call and egress — confirmed multi-step exfiltration chain.
AWR-112

Credential Harvest Chain

PII/credential detection followed by egress to new host — credential exfiltration chain.
AWR-113

MCP Privilege Escalation

MCP call → authority exceeded → unauthorized tool call. Privilege escalation chain.

Full AWR Rule Library

218 of 285 rules evaluate against the telemetry the sensor produces today. The other 67 are authored ahead of the Phase-2 OS-layer signals they need, and labelled as such in the library. None are advertised-but-unable-to-fire — that is zero, and you can reproduce it yourself with scripts/audit_producer_coverage.py. All 285 ship in the free download.

Download free →

No account, no commitment. Nothing leaves your machine.

This page summarizes public reporting and research. AariaSec mappings are analytical references, not claims about any specific deployment.